1. Introduction

The protection of personal data is a key priority for TicketSeller. Personal data is processed in accordance with the General Data Protection Regulation, known as GDPR, as well as the applicable Greek and European data protection legislation.

This policy applies to website visitors, customers, users who make bookings, newsletter subscribers, individuals interested in packages or services, as well as partners or prospective independent travel agents.

2. Who we are

The data controller responsible for the processing of personal data is Ticketseller IKE.

For any question regarding this policy or for the exercise of rights related to personal data, you may contact us using the email address above.

3. What personal data we collect

Depending on how you use our website or services, we may collect different categories of personal data.

3.1 Website visitor data

When you visit our website, technical data may be collected, such as:

• IP address,
• device type,
• browser type,
• operating system,
• pages visited,
• time spent on the website,
• cookies and similar technology data.

3.2 Data from contact and registration forms

When you contact us or complete forms on our website, we may collect information such as:

• full name,
• email address,
• telephone number,
• message content,
• interest in services or packages,
• information voluntarily provided through the relevant form.

3.3 Newsletter data

When you subscribe to our newsletter, we collect the necessary contact details, such as your email address, in order to send informational or promotional content related to TicketSeller services, updates and activities.

3.4 Data for the purchase of packages or services

When you express interest in, or proceed with the purchase of, packages or services, we may collect:

• identification details,
• contact details,
• package or service information,
• transaction information,
• information required for the provision of the service or cooperation.

3.5 Booking data

Through TicketSeller, you may make or request bookings for travel services, including hotels, activities, ferry tickets, air travel services or other travel services, where available.

In order to complete a booking, it may be necessary to process and transfer the required traveller data to relevant providers, such as hotels, ferry companies, airlines, activity providers, booking systems or other partners.

3.6 Partner and independent travel agent data

When an individual expresses interest in cooperating with TicketSeller or participating in cooperation packages, we may collect:

• full name,
• contact details,
• professional interest,
• cooperation preferences,
• information provided through a relevant form or communication.

4. How we collect personal data

Personal data may be collected:

• when you visit our website,
• when you complete a contact form,
• when you subscribe to our newsletter,
• when you express interest in packages or cooperation,
• when you make or request a booking,
• when you contact us by email, telephone or other available communication channels,
• when you interact with advertising or informational content of the company.

5. Purposes for which we use personal data

We use personal data for the following purposes:

• to provide and manage travel services,
• to complete bookings,
• to communicate with users, customers and partners,
• to send updates or newsletters, where relevant consent has been provided,
• to process requests related to packages or cooperation,
• to support independent travel agents and partners,
• to manage payments and transactions,
• to improve our website and services,
• to analyse website traffic and the effectiveness of advertising activities,
• to ensure website security and prevent malicious use,
• to comply with legal, tax or regulatory obligations.

6. Legal bases for processing

The processing of personal data is carried out, depending on the case, on one or more of the following legal bases:

Performance of a contract or pre-contractual steps

When processing is necessary for the provision of a service, completion of a booking, purchase of a package or response to a cooperation request.

Consent

When the user chooses to subscribe to a newsletter, accept non-essential cookies or receive promotional communication.

Legitimate interest

When processing is necessary for improving our services, ensuring website security, serving users and partners, or managing basic business communication.

Legal obligation

When processing is required in order to comply with tax, accounting, commercial or other legal obligations.

7. Bookings and transfer to travel service providers

For the completion of travel bookings, we may transfer the necessary data to third-party providers or partners, such as:

Such transfer is limited to the data strictly necessary for the provision of the service, ticket issuance, booking confirmation, customer support or resolution of related matters.

8. Payments and payment providers

Payments for services or packages may be carried out through cooperating banks, payment service providers or financial institutions.

Indicatively, depending on the available payment method, services such as Alpha Bank, Piraeus Bank, PayPal or TBI Bank may be used.

TicketSeller does not store full payment card details, unless this is required and expressly permitted by applicable law or by a secure certified payment provider environment.

9. Newsletter and promotional communications

If you subscribe to our newsletter or provide relevant consent, we may use your contact details to send updates, news, offers or other content related to TicketSeller services.

You may withdraw your consent at any time:

• through the unsubscribe link included in our emails,
• or by sending a request to info@ticketseller.gr.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

10. Cookies, analytics and advertising technologies

Our website uses cookies and similar technologies for:

• the proper operation of the website,
• storing user preferences,
• analysing website traffic,
• improving user experience,
• measuring the performance of advertising activities.

The website may use analytics and advertising measurement tools, such as Google Analytics and Meta Pixel.

The use of non-essential cookies or tracking technologies is carried out, where required, based on the user’s consent.

11. Who may receive personal data

Depending on the service or request, personal data may be transferred to:

• travel service providers,
• hotels,
• transport companies,
• ferry or airline companies,
• activity providers,
• technology service providers,
• website hosting providers,
• email or newsletter service providers,
• payment providers,
• cooperating professionals or advisors,
• public authorities, where required by law.

The above recipients receive only the data necessary for the respective processing purpose.

12. Transfers of data outside the European Economic Area

Some technology providers or services used for the operation, analysis or promotion of the website may process data outside the European Economic Area.

In such cases, we take measures to ensure that transfers are carried out in accordance with the GDPR, such as through appropriate contractual terms, adequacy decisions or other lawful protection mechanisms.

For data transfers to the United States, the EU-U.S. Data Privacy Framework may apply, where the relevant conditions are met, or another lawful transfer mechanism may be used.

13. Data retention period

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required by law.

• Contact data is retained for as long as necessary to respond to and manage the relevant request.
• Booking data is retained for as long as necessary for the performance of the booking, customer support and compliance with legal obligations.
• Transaction data is retained in accordance with applicable tax and accounting obligations.
• Newsletter data is retained until consent is withdrawn or the user unsubscribes.
• Technical data and logs are retained for a reasonable period for website security and operational purposes.

When data is no longer necessary, it is securely deleted or anonymised.

14. Security of personal data

We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, alteration, disclosure or destruction.

Such measures may include, indicatively:

• restricted access to authorised persons,
• use of secure technological systems,
• encryption where required,
• regular monitoring and maintenance of systems,
• procedures for managing requests and security incidents.

Although we take reasonable protection measures, no online transmission or storage system can be considered absolutely secure.

15. User rights

Under the GDPR, you have the following rights regarding your personal data:

• right to be informed,
• right of access,
• right to rectification,
• right to erasure,
• right to restriction of processing,
• right to object,
• right to data portability,
• right to withdraw consent, where processing is based on consent.

For security reasons, we may request additional information in order to verify your identity before fulfilling your request.

16. Right to lodge a complaint

If you believe that the processing of your personal data violates applicable legislation, you have the right to lodge a complaint with the competent supervisory authority.

In Greece, the competent authority is the Hellenic Data Protection Authority.

Website: www.dpa.gr

17. Children and minors

The services of the website are not directly addressed to children or minors without the participation or consent of a parent or legal guardian, where such consent is required.

If we become aware that personal data of a minor has been collected without the required consent or lawful basis, we will take the necessary steps to delete or restrict the processing of such data.

18. Links to third-party websites

Our website may include links to third-party websites, platforms, payment providers, travel service providers or cooperating tools.

We are not responsible for the privacy practices, content or security of third-party websites. We recommend that you read the respective privacy policies of each third-party provider before using their services.

19. Changes to this policy

This policy may be updated from time to time in order to reflect changes in our services, the technology we use or the relevant legislation.

Each new version will be published on this page with an updated last revision date.